Zeek
Together is faster: Zeek for vulnerabilities
I love this quote by John Lambert. It perfectly describes the impact network defenders can achieve by pooling resources, insights, and techniques.
Featured
Ten Black Hat NOCs and counting: Corelight sees it all
After ten Black Hat NOCs, see what network traffic reveals: cleartext passwords, a leaked API key, and infected devices nobody noticed.